CVE-2008-5232

CVSS V2 High 9.3 CVSS V3 None
Description
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Overview
  • CVE ID
  • CVE-2008-5232
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2008-11-26T01:30:00
  • Last Modified Date
  • 2019-12-03T15:40:00
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/30814 Third Party Advisory VDB Entry
http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txt Exploit Third Party Advisory VDB Entry
http://securitytracker.com/id?1020733 Third Party Advisory VDB Entry
http://packetstormsecurity.org/0808-exploits/wms-overflow.txt Exploit Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44629 Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-5232
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5232
History
Created Old Value New Value Data Type Notes
2022-05-10 16:58:28 Added to TrackCVE